Legal claims defining the scope of protection. Each claim is shown in both the original legal language and a plain English translation.
1. An automated manufacturing system comprising: a non-safe communication master of the automated manufacturing system, wherein the non-safe communication master is not configured for error-proof communication by means of a secure network protocol; and a plurality of local network subscribers of the automated manufacturing system, the local network subscribers being connected to the non-safe communication master via a communication network, wherein communication between the local network subscribers in the communication network is realized via telegrams, wherein at least two of the local network subscribers i) are safety network subscribers between which safety-related data are transferred based on error-proof communication, wherein a verification of a communication in conformity to one or more safety requirements includes checking a received telegram by a receiving subscriber for at least one of the following characteristics: a time stamp, a transmitter identity, and a receiver identity, and ii) form a logical group of network subscribers for performing a safety-related function, and wherein the non-safe communication master maintains a routing table that stores logical connections between the local safety network subscribers in accordance with the safety-related function, the non-safe communication master being configured to control automatic routing of data from a transmitting safety network subscriber to a receiving safety network subscriber in accordance with the routing table, such that each communication among the safety network subscribers of one logical group occurs via two point-to-point connections, namely from the transmitting safety network subscriber to the non-safe communication master and then from the non-safe communication master to the receiving safety network subscriber, wherein the receiving safety network subscriber is configured to perform a safety-related action according to the received telegram, and wherein the communication network includes a means to retrieve information from the safety network subscribers for establishing the routing table, and to establish the routing table on the basis of the information.
An automated manufacturing system uses a regular, non-secure communication network (not error-proof) to connect a central controller (master) to various local devices (subscribers). Some of these subscribers are safety-related devices exchanging safety data. These safety devices form logical groups that perform a specific safety function. The central controller maintains a routing table defining connections between safety devices based on their group membership. When a safety device needs to send data, it's routed through the central controller to the destination safety device. The receiving safety device validates incoming messages by checking for a timestamp, sender ID, and receiver ID. The system can automatically learn network configuration to build the routing table.
2. The automated manufacturing system according to claim 1 , wherein the non-safe communication master is configured to perform the following steps to initialize the routing table: a) determining a configuration of the communication network, b) determining identification information of the safety network subscribers, c) performing a plausibility check of the identification information determined, if applicable, d) establishing an instruction or copy list for the routing of telegrams in cyclic operation from the information resulting from steps a) and b).
To initialize the routing table, the non-safe communication master first determines the communication network configuration. It then identifies all safety network subscribers and performs a plausibility check on their identification information. Finally, it establishes an instruction or copy list for routing telegrams in cyclic operation based on the network configuration and subscriber identification. This allows the automated manufacturing system, as described previously, to establish communication paths.
3. The automated manufacturing system according to claim 1 , wherein the non-safe communication master is configured to retrieve information from the safety network subscribers connected to the communication network, and to determine from the retrieved information which safety network subscribers are allocated to a respective logical group, and to establish the logical connections in the routing table in accordance with the allocation of the safety network subscribers.
The non-safe communication master retrieves information from the safety network subscribers to determine which subscribers belong to which logical group. Based on this information, it establishes logical connections in the routing table. This enables the automated manufacturing system, as described previously, to dynamically configure safety communication paths.
4. The automated manufacturing system according to claim 1 , wherein addresses of the safety network subscribers are configured to reflect a collective allocation to a respective logical group.
Addresses of the safety network subscribers are configured to reflect their group membership, making it easier for the non-safe communication master to determine the logical connections for the routing table in the automated manufacturing system described previously. The address structure itself indicates group allocation.
5. The automated manufacturing system according to claim 1 , wherein the transfer of safety-related data occurs in telegrams via a non-safe channel that is a communication medium for standard data as well as for safety-related data, and wherein, for error-proof transfer of the safety-related data, the receiving safety network subscriber is configured to detect errors with regard to permutation, corruption, misrouting or deterioration of telegrams.
Safety-related data is transmitted in telegrams using the same non-secure communication channel as standard data. To ensure reliable delivery, the receiving safety network subscriber detects errors such as permutation, corruption, misrouting, or deterioration of telegrams. This implements error-proof communication on a non-safe channel in the automated manufacturing system described previously.
6. The automated manufacturing system according to claim 5 , wherein the receiving safety network subscriber checks a received telegram for at least one of the following characteristics: redundancy, a check sum, and a sequential telegram number.
To detect errors in the telegrams, the receiving safety network subscriber checks for redundancy, a checksum, and a sequential telegram number, as part of the error detection in the automated manufacturing system described previously. These checks help guarantee data integrity when using the non-safe communication channel.
7. The automated manufacturing system according to claim 6 , wherein the non-safe communication master is configured to allocate logical groups to specific address spaces.
The non-safe communication master assigns logical groups to specific address spaces. This helps in managing and routing telegrams between safety network subscribers in the automated manufacturing system described previously and allows for easier identification and management of safety groups.
8. The automated manufacturing system according to claim 1 , wherein among the safety network subscribers of a logical group there is at least one safety network subscriber that comprises an input module and at least one safety network subscriber that comprises an output module wherein the output module is configured to initiate a safety function in response to a telegram from an input module.
Within each logical group of safety network subscribers, there's at least one input module and at least one output module. The output module initiates a safety function upon receiving a telegram from an input module. This facilitates a closed-loop safety response within the automated manufacturing system described previously.
9. The automated manufacturing system according to claim 5 , characterized in that the receiving safety network subscriber checks a received telegram for all of the following characteristics: a time stamp, redundancy, a check sum, a sequential telegram number, a transmitter identity a receiver identity.
The receiving safety network subscriber comprehensively checks received telegrams for a timestamp, redundancy, a checksum, a sequential telegram number, transmitter identity, and receiver identity, in the error detection mechanism for the automated manufacturing system described previously. This enhances the integrity of communication over the shared non-safe channel.
10. A method for monitoring safety functions in an automated manufacturing system comprising a communication master that is not configured for error-proof communication by means of a secure network protocol and a plurality of local network subscribers, the local network subscribers being connected to the non-safe communication master via a communication network, and communication between the local network subscribers in the communication network being realized via telegrams, the method comprising: retrieving information from safety network subscribers for establishing a routing table that stores logical connections between the safety network subscribers in accordance with a safety-related function, wherein at least two of the local network subscribers i) are the safety network subscribers between which safety-related data are transferred based on error-proof communication, wherein a verification of a communication in conformity to one or more safety requirements includes checking a received telegram by a receiving subscriber for at least one of the following characteristics: a time stamp, a transmitter identity, and a receiver identity, and ii) form a logical group of network subscribers for performing the safety-related function; maintaining, at the non-safe communication master, the routing table on the basis of the information retrieved; automatically routing, through the non-safe communication master, data from a transmitting safety network subscriber to a receiving safety network subscriber in accordance with the routing table, such that each communication among the safety network subscribers of one logical group occurs via two point-to-point connections, namely from the transmitting safety network subscriber to the non-safe communication master and then from the non-safe communication master to the receiving safety network subscriber; and performing, at the receiving safety network subscriber, the safety-related action according to the received telegram.
A method monitors safety functions in an automated manufacturing system with a non-secure communication master and local subscribers communicating via telegrams. The method retrieves information from safety network subscribers to establish a routing table storing logical connections based on safety functions. The non-safe communication master maintains this routing table. Data is automatically routed through the master from a transmitting safety subscriber to a receiving one, ensuring communication within a logical group happens via two point-to-point connections via the master. The receiving safety subscriber then performs a safety-related action based on the telegram, verifying telegrams by checking for a timestamp, transmitter ID, and receiver ID.
Unknown
December 30, 2014
Browse 5M+ US patents with plain-English claim translations and AI-generated analysis.